General

  • Target

    JaffaCakes118_096546c04af6e896d7d6da5c03e75c5e2d76750abf2dd92edae73272ab5f21f8

  • Size

    177KB

  • Sample

    241230-vxt87a1kgj

  • MD5

    12044605e68a63f8d894b7e928c86f06

  • SHA1

    1c21cd3f430d282bf89136522076dc9568d6d17a

  • SHA256

    096546c04af6e896d7d6da5c03e75c5e2d76750abf2dd92edae73272ab5f21f8

  • SHA512

    ba48638fc756f088442f19feddb64a961d4f789a5121f4489e6be85e9a6665d4c3eb55a5124279a53b762742da4665d2b9aca511187baf41b38da52fd20e1a23

  • SSDEEP

    3072:XoNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SurKI6bl/g:YaIzLgKrjbvUAjERycp6c8qgATA2TQUr

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.79.91.89:9987

157.245.231.228:6051

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_096546c04af6e896d7d6da5c03e75c5e2d76750abf2dd92edae73272ab5f21f8

    • Size

      177KB

    • MD5

      12044605e68a63f8d894b7e928c86f06

    • SHA1

      1c21cd3f430d282bf89136522076dc9568d6d17a

    • SHA256

      096546c04af6e896d7d6da5c03e75c5e2d76750abf2dd92edae73272ab5f21f8

    • SHA512

      ba48638fc756f088442f19feddb64a961d4f789a5121f4489e6be85e9a6665d4c3eb55a5124279a53b762742da4665d2b9aca511187baf41b38da52fd20e1a23

    • SSDEEP

      3072:XoNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SurKI6bl/g:YaIzLgKrjbvUAjERycp6c8qgATA2TQUr

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks